Configuring Devices for Management, 2.13
Configuring Access Points for Network Management

Table Of Contents

Configuring Access Points for Network Management

Introduction

Using the AP CLI for Network Management Setup

Using the AP Web Interface for Network Management Set Up

Using WLSE Configuration Templates for Network Management Set Up

Using the Deployment Wizard for Network Management Set Up


Configuring Access Points for Network Management


This chapter provides procedures for preparing IOS access points for basic network management by the WLSE.


Note If you are using Wireless Domain Services (WDS), you can use the WLSE's Deployment Wizard to set up your IOS access points and WDS devices for both network management and radio management. For a brief description of the Wizard, see Using the Deployment Wizard for Network Management Set Up. For detailed information on using the Wizard, see the WLSE online help or the WLSE user guide on Cisco.com at http://www.cisco.com/en/US/products/sw/cscowork/ps3915/products_user_guide_list.html.


Preparing IOS access points and the WLSE for participation in the Cisco Structured Wireless-Aware Network (SWAN), is covered in "Configuring Devices for Radio Management."

This chapter contains the following topics:

Introduction

Using the AP CLI for Network Management Setup

Using the AP Web Interface for Network Management Set Up

Using WLSE Configuration Templates for Network Management Set Up

Using the Deployment Wizard for Network Management Set Up

Introduction

Use one of the following methods to set up IOS access points and bridges:

Log into each device by using Telnet or SSH and use the device's CLI commands—See Using the AP CLI for Network Management Setup.

Log into each device's Web interface—See Using the AP Web Interface for Network Management Set Up.

Use the WLSE's automatic configuration option for first-time device configuration and applying a configuration template to a number of access points—See Using WLSE Configuration Templates for Network Management Set Up.

After you set up a device, all of its MIB variables can be accessed and the device can be discovered by the WLSE.

After discovering and managing devices, you should use WLSE configuration templates for configuration changes—See the information on IOS templates in the WLSE online help or the WLSE user guide on Cisco.com at http://www.cisco.com/en/US/products/sw/cscowork/ps3915/products_user_guide_list.html.

Access points that function as AAA servers can be monitored by the WLSE. However, if you are registering an AP 1100 or AP 1210 as an AAA server with the WLSE, that access point can no longer be managed by the WLSE as an access point that provides wireless services.


Note VLAN information for IOS access points might not be collected by the WLSE if WEP keys are not configured in each VLAN. This affects VLAN reports, grouping, and faults. VLAN information becomes accessible through SNMP as soon as WEP keys are configured.


Using the AP CLI for Network Management Setup

To configure IOS devices by using the device CLI:

Procedure


Step 1 Access the device CLI via Telnet, SSH, or the console.

Step 2 Enter configuration mode.

Step 3 Enable Cisco Discovery Protocol (CDP) by entering the following commands for each interface that will participate in CDP. Do not enable CDP on radio interfaces.

configure terminal
interface interface
cdp run

where interface is the name of the interface; for example FastEthernet0.


Note You can find out whether CDP has been enabled by using the show cdp command in enable mode.



Note If you do not want to use CDP, you can add all access points as seeds or import devices. For more information, see the device discovery information in the WLSE online help or the WLSE user guide on Cisco.com at http://www.cisco.com/en/US/products/sw/cscowork/ps3915/products_user_guide_list.html.


Step 4 To configure SNMP, enter the following commands in the sequence shown. The first command includes the ISO view in the AP's configuration. The read-only SNMP community string enables discovery, fault monitoring, and reporting. The read/write community string enables firmware updating, configuration management, and all radio management features (such as client walkabout and radio scanning).


Note The community strings must also be entered on the WLSE. See the information on entering device credentials in the WLSE online help or the WLSE user guide on Cisco.com at http://www.cisco.com/en/US/products/sw/cscowork/ps3915/products_user_guide_list.html.


a. Include the ISO view:

snmp-server view iso iso included


Note IOS access points that do not have an ISO view will be placed in the Misconfigured Devices system group after discovery and a fault will be generated. The fault refers to a "dot 11 MIB" problem.


b. Configure the read-only community:

snmp-server community community_string view iso ro

c. Configure the read/write community:

snmp-server community community_string view iso rw


Caution Do not configure an IOS access point with an iee802dot11 view. An access point configured with such a view will not be discovered by the WLSE.

Step 5 (Optional) It is useful to set the system name, contact, and location SNMP variables to make the device more manageable and take advantage of system-defined device grouping. Use the following commands:

configuration terminal
hostname access_point
snmp-server location AP_location
snmp-server contact AP_contact

where access_point is the access point's host name, AP_location is its location, and AP_contact is the name of the contact person.

Step 6 You can use either Telnet or SSH to push configuration templates to IOS access points. To use templates to configure IOS access points, you must configure either Telnet or SSH or both, as follows.

To enable and configure SSH, enter the following commands. In these commands, hostname is the hostname of the access point, and domain_name is your network's domain name (for example, cisco.com). At the prompt for the number of bits in the modulus, press Return to accept the default or enter a value.

hostname hostname
ip domain-name domain_name
crypto key generate rsa
How many bits in the modulus [512]:

The following commands are recommended, but optional:

ip ssh time-out 120
ip ssh authentication-retries 3

To configure Telnet, enter the following commands:

line 0 4
no access-class 111 in

The following commands are recommended, but optional:

width 80
length 24

Step 7 Exit global configuration mode, then enter the following command:

write memory


Using the AP Web Interface for Network Management Set Up

To configure IOS devices by using the device Web interface:

Procedure


Step 1 Log into the Web interface of the access point.

Step 2 To enable CDP, select SERVICES from the menu, then click CDP:

a. After Cisco Discovery Protocol (CDP), select Enabled.

b. Click Apply.


Note If you do not wish to use CDP, you can add all access points as seeds or import devices. For more information, see the device discovery information in the WLSE online help or in the WLSE user guide on Cisco.com at http://www.cisco.com/en/US/products/sw/cscowork/ps3915/products_user_guide_list.html.


Step 3 You can use either Telnet or SSH (secure shell protocol) to push configuration templates to IOS access points. To use templates to configure IOS access points, you must configure either Telnet or SSH or both.

To enable and configure SSH (secure shell protocol), enter the following:

1. Select SERVICES > Telnet/SSH.

2. Enable Secure Shell.

3. Enter a System Name.

4. Enter a Domain Name (for example, cisco.com).

5. (Optional) Enter the RSA key size.

6. (Optional) Enter the Authentication Timeout.

7. (Optional) Enter Authentication Retries.

8. Click Apply.

To enable and configure Telnet:

1. Select SERVICES > Telnet/SSH.

2. Enable Telnet.

3. (Optional) Enable Teletype.

4. Enter the number of Columns.

5. Enter the number of Lines.

6. Click Apply.

Step 4 To enable SNMP:

a. Select Services > SNMP.

b. After Simple Network Management Protocol (SNMP), select Enabled.

c. Enter the System Name (sysName), System Location (sysLocation), and System Contact (sysContact).

d. Click Apply.

Step 5 In the SNMP Request Communities section, enter a read-only community string and configure an ISO view. This community string is required for discovery and to enable the fault and report features of the WLSE. Community strings are also required for radio management.

a. Enter the community string in the SNMP Community field.

b. Enter iso in the Object Identifier field.


Note IOS access points that do not have an ISO view will be placed in the Misconfigured Devices system group after discovery, and a fault will be generated. The fault message refers to a "dot11 MIB problem."


c. Select Read-Only.

d. Click Apply.


Note Do not configure an IOS access point with an iee802dot11 view. An access point configured with such a view will not be discovered by the WLSE.


Step 6 In the SNMP Request Communities section, enter a read/write community string to enable firmware and configuration updates on the access point.

a. Enter the community string in the SNMP Community field.

b. Select Read-Write.

c. Enter iso in the Object Identifier field.

d. Click Apply.

Step 7 The community strings created in Steps 5 and 6 must be entered on the WLSE before the device can be discovered and other WLSE features can be used. For more information, see the information on entering device credentials in the WLSE online help or the WLSE user guide on Cisco.com at http://www.cisco.com/en/US/products/sw/cscowork/ps3915/products_user_guide_list.html.


Using WLSE Configuration Templates for Network Management Set Up

You can perform initial configuration by using the WLSE's startup template feature. For more information on startup templates, see the information on managing device configuration in the WLSE online help or the WLSE user guide on Cisco.com at http://www.cisco.com/en/US/products/sw/cscowork/ps3915/products_user_guide_list.html.


Note Do not configure an IOS access point with an iee802dot11 view. An access point configured with such a view will not be discovered by the WLSE.


Using the Deployment Wizard for Network Management Set Up

The Deployment Wizard appears in a separate window when you log in to the Web interface of the WLSE. The Wizard assists with the deployment and planning of WDS devices and IOS access points. For more information, see the WLSE online help or the WLSE user guide at http://www.cisco.com/en/US/products/sw/cscowork/ps3915/products_user_guide_list.html.